Privacy notice
Last updated: 14 October 2026
PC Legal Technology provides independent legal technology consultancy, project and change management, and training to law firms and other professional services organisations. We take the confidentiality of the information entrusted to us seriously. This notice explains what personal information we collect, how we use it, who we share it with and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
PC Legal Technology is run by Peter Creber, who is the data controller for the personal information described in this notice. You can contact us about anything in this notice at privacy@pclt.co.uk.
We are not required to appoint a Data Protection Officer. Questions about data protection are handled directly using the contact details above.
2. Information we collect
Depending on how you deal with us, we may collect:
- Contact details: your name, job title, organisation, email address and telephone number.
- Enquiry and correspondence: the content of messages you send us through our website, by email, by phone or via LinkedIn.
- Client relationship information: details needed to scope, deliver and invoice our services, such as meeting notes, project documents, training attendance and billing details.
- Technical information: when you visit our website, our hosting provider automatically processes basic technical data such as your IP address and browser type to deliver the site and keep it secure.
We do not intend to collect special category data (for example, health information) about our contacts. Please do not send us this type of information unless we have specifically asked for it.
3. Where we get it from
Most information comes directly from you. We may also receive business contact details from colleagues who introduce you to us, from your organisation when we are engaged to work with it, or from public professional sources such as LinkedIn and your firm's website.
4. How we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and arranging initial discussions | Legitimate interests (responding to people who contact us) or steps taken at your request before entering into a contract |
| Delivering consultancy, project and change management, and training services | Performance of a contract with you or your organisation; otherwise legitimate interests in delivering services to our client |
| Invoicing, accounting and record keeping | Legal obligation and performance of a contract |
| Sending occasional insights, articles and event invitations to business contacts | Legitimate interests, or your consent where the Privacy and Electronic Communications Regulations require it. You can unsubscribe at any time. |
| Running and securing our website and IT systems | Legitimate interests in keeping our services secure and available |
| Establishing, exercising or defending legal claims, and dealing with insurers and professional advisers | Legitimate interests and, where applicable, legal obligation |
Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms. You can ask us for more information about this balancing exercise.
5. Client data we handle during engagements
When we work with a law firm, we may have access to its systems, including its practice management system, and to personal data relating to its staff, clients and matters. In those circumstances we act as a data processor on the firm's behalf. We process that data only on the firm's documented instructions and for the purposes of the engagement, keep it confidential, protect it with appropriate security measures, and return or securely delete it at the end of the engagement. Those arrangements are set out in our engagement terms and, where appropriate, a data processing agreement. The law firm remains the controller of that data, and its own privacy notice applies.
6. Who we share it with
We do not sell your personal information. We share it only where necessary with:
- service providers who support our business, such as our website host (Netlify, Inc.), email and document storage providers, and IT support;
- our accountant, insurers, and legal and professional advisers;
- HM Revenue & Customs, regulators, courts or law enforcement, where we are legally required to do so.
Our service providers act on our instructions and are bound by contractual obligations to protect your information.
7. International transfers
Some of our service providers, including our website host, are based in or process data in the United States or other countries outside the UK. Where personal information is transferred outside the UK, we make sure it is protected by an adequacy regulation (including the UK Extension to the EU-US Data Privacy Framework), or by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
8. How long we keep it
| Information | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | Up to 2 years from our last contact |
| Client engagement records | 6 years from the end of the engagement, in line with limitation periods for contract claims |
| Accounting and tax records | At least 5 years after the 31 January Self Assessment deadline for the relevant tax year, as required by HMRC |
| Marketing contacts | Until you unsubscribe or object, and reviewed at least every 2 years |
| Client data processed during an engagement | Returned or securely deleted at the end of the engagement, unless the client instructs otherwise |
9. How we protect it
Security is central to our work. We use appropriate technical and organisational measures to protect personal information, including encrypted devices and connections, multi-factor authentication, access controls on a need-to-know basis, and secure deletion when information is no longer needed.
10. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- ask us to correct information that is inaccurate or incomplete;
- ask us to erase your information;
- ask us to restrict how we use your information;
- object to our use of your information where we rely on legitimate interests, and to object at any time to direct marketing;
- receive your information in a portable format, where this applies;
- withdraw your consent at any time, where we rely on consent.
To exercise any of these rights, email privacy@pclt.co.uk. There is normally no charge, and we will respond within one month. We may need to confirm your identity before acting on a request. Some rights are subject to exemptions and conditions, and we will explain if one applies.
We do not make decisions about you based solely on automated processing.
11. Cookies and our online tools
Our website does not use cookies, analytics or advertising trackers. Fonts and software libraries are hosted on our own site, so visiting it does not send your information to third-party services.
Our free tools (such as the capability scorecard, calculators and e-bundle builder) run entirely in your web browser. The answers, figures and documents you enter are processed on your own device and are not sent to us or stored by us. Your scorecard result is also kept temporarily in your browser so that our requirements builder can use it if you go on to build a specification; it is cleared when you close the browser tab. If you choose to bring your results to our contact form, you can edit or delete them before sending.
Our workflow capture tool keeps the workflow you are working on in your browser in the same way, so it is not lost if you reload the page; it is cleared when you close the browser tab, and the files you download are created on your device. If you use its prompt with an AI assistant, that conversation takes place in your own AI tool, under your or your firm’s agreement with that provider. It does not pass through us, and we never see it.
The search on our website also runs in your browser: what you type into it is not sent to us or to anyone else.
12. Complaints
If you have concerns about how we handle your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
13. Changes to this notice
We may update this notice from time to time. The latest version will always be published on this page, with the date it was last updated.